---
- hosts: all
  vars:
    tuned_base_profile: "network-latency"
    tuned_custom_profile:
      name: tweaks
      sections:
        - name: main
          params:
            - option: summary
              value: "Custom tuned profile created by jlay - virt. IO scheduler, TCP, etc"
            - option: include
              value: "{{ tuned_base_profile }}"
        - name: disk
          params:
            - option: devices_udev_regex
              value: "(ID_MODEL=QEMU_HARDDISK)|(ID_VENDOR=HC)"
            - option: elevator
              value: "mq-deadline"
        - name: sysctl
          params:
            - option: net.core.default_qdisc
              value: "fq"
            - option: net.ipv4.tcp_congestion_control
              value: "bbr"
  roles:
    - {role: bootstrap}
    - {role: tuned}
    - {role: tmp-mount-fix}
    - {role: install-packages}
    - {role: update-packages}
    - {role: fedora-upgrade}
    - {role: create-user}
    - {role: hardening}
#    - {role: docker} # TODO: replace me with a generic container role, podman on EL based distros - Docker on Debian/Ubuntu
    - {role: zfs}
    - {role: sysctl}